bat393 Privacy Policy

1. Scope of This Policy

This Policy applies to all personal data collected by bat393 in connection with your use of the bat393 website, mobile-optimised platform, customer support channels, and any other services offered under the bat393 brand. It applies to all registered players and visitors, including those based in Pakistan and other locations where the Platform is accessible.

This Policy should be read together with bat393's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Policy and those documents specifically regarding data handling, this Policy shall prevail.

2. Data We Collect

bat393 collects the following categories of personal data from registered players and platform visitors:

2.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC or other government-issued identity document
• Pakistani mobile number (used as your primary account identifier and for OTP verification)
• Date of birth (for age verification purposes)
• CNIC number or passport number (collected during KYC verification)
• Email address, where provided voluntarily

2.2 Financial Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references
• JazzCash or Easypaisa account reference numbers associated with transactions
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah) where provided for withdrawal processing
• USDT TRC20 wallet addresses where used for cryptocurrency transactions

2.3 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Session logs, including login timestamps and session durations
• Game activity records, including bets placed, game titles accessed, and wagering history
• Platform navigation and interaction data (pages visited, features used)

2.4 Communications Data

• Records of customer support interactions via live chat or email
• SMS communications sent to your registered mobile number
• Voluntary feedback or complaints submitted through any bat393 channel

3. How We Collect Data

3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or otherwise interact with bat393.

3.2 Automatically — through cookies, server logs, and similar technologies as you browse and use the bat393 platform. This includes technical data about your device and session behaviour.

3.3 From third parties — including payment service providers (JazzCash, Easypaisa, HBL, etc.) who confirm transaction details; identity verification services used during KYC processes; and fraud detection services that help bat393 identify suspicious account activity.

4. Purposes of Processing

bat393 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your bat393 account, including processing your bat393 Login credentials and account preferences.
• Identity & age verification: Confirming you are aged 18 or over and that your identity matches the information provided during registration, as required for KYC compliance.
• Payment processing: Processing deposits and withdrawals via your chosen payment method (JazzCash, Easypaisa, bank transfer, USDT TRC20, debit card).
• Platform security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other prohibited conduct.
• Customer support: Responding to your queries, complaints, and support requests effectively.
• Legal compliance: Meeting bat393's obligations under applicable gaming regulations, anti-money laundering requirements, and data protection laws.
• Responsible gaming: Monitoring account activity to identify signs of problem gambling and administering self-exclusion and deposit limit tools.
• Platform improvement: Analysing aggregate usage data (in anonymised or pseudonymised form) to improve the bat393 platform, game selection, and user experience.
• Communications: Sending transactional communications such as OTP messages, withdrawal confirmations, and account notifications to your registered mobile number.

5. Legal Basis for Processing

bat393 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil bat393's obligations under the Terms & Conditions you accepted at registration, including account management, payment processing, and game delivery.
• Legal obligation: Processing necessary for bat393 to comply with applicable laws and regulatory requirements, including anti-money laundering obligations and age verification requirements.
• Legitimate interests: Processing carried out for bat393's legitimate business interests in fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and interests.
• Consent: Where bat393 relies on your consent for any specific processing activity (such as optional marketing communications), you have the right to withdraw that consent at any time by contacting bat393 support.

6. Sharing Your Data

bat393 does not sell your personal data to any third party. bat393 may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described in Section 4:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency processing services, for transaction processing purposes.
• KYC and identity verification providers: Third-party services used to verify identity documents and confirm age eligibility.
• Fraud and AML detection services: Services that help bat393 identify potentially fraudulent transactions or money laundering activity.
• Game content providers: Licensed game studios (Evolution Gaming, Pragmatic Play, PG Soft, JILI, and others) may receive limited technical data necessary for game session management.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory requirement, bat393 will disclose personal data to competent authorities.
• IT and hosting providers: Infrastructure service providers that host and maintain the bat393 platform, subject to appropriate data processing agreements.

All third parties with whom bat393 shares personal data are required to handle that data in accordance with applicable data protection principles and are prohibited from using it for any purpose other than those specified by bat393.

7. International Data Transfers

As an online platform serving players across Pakistan and operating infrastructure in multiple countries, bat393 may transfer your personal data to countries outside Pakistan. Where such transfers occur, bat393 ensures appropriate safeguards are in place — including contractual data protection clauses with receiving parties — to ensure your personal data receives a level of protection equivalent to that required under applicable data protection principles.

8. Data Retention

bat393 retains your personal data for as long as is necessary for the purposes outlined in this Policy, taking into account the following factors:

• Active accounts: Personal data is retained for the duration of your active bat393 account relationship.
• Closed accounts: Following account closure, bat393 retains identity, financial, and transaction records for a minimum of five (5) years to satisfy anti-money laundering obligations and regulatory requirements.
• Self-excluded players: Records of self-exclusion are retained for a minimum of five (5) years to prevent re-registration during exclusion periods.
• Technical and usage data: Anonymised or aggregated usage data may be retained indefinitely for platform analytics purposes.

bat393 will securely delete or anonymise personal data that is no longer required for any of the above purposes.

9. Security Measures

bat393 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and bat393's servers
• Encrypted storage of passwords using industry-standard hashing algorithms — bat393 does not store passwords in plain text
• OTP-based two-factor verification for account access and sensitive account changes
• Access controls limiting employee access to personal data to those with a legitimate need
• Regular security assessments and monitoring of platform systems

While bat393 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bat393 Login credentials and for notifying bat393 immediately if you suspect any unauthorised access to your account.

10. Cookies & Tracking Technologies

bat393 uses cookies and similar tracking technologies to operate the Platform and improve your experience. The types of cookies bat393 uses include:

• Essential cookies: Required for core Platform functionality, including maintaining your logged-in session. These cannot be disabled without impairing Platform use.
• Functional cookies: Remember your preferences (such as language settings) to personalise your experience.
• Analytics cookies: Collect anonymised data about how visitors use the Platform, helping bat393 identify areas for improvement. bat393 uses only first-party analytics and does not share this data with advertising networks.
• Security cookies: Help bat393 detect and prevent fraudulent activity and protect against account takeover attempts.

You may control cookie settings through your browser preferences. Disabling essential cookies will affect core Platform functionality. bat393 does not use third-party advertising cookies or sell browsing data to advertisers.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bat393:

• Right of access: You may request a copy of the personal data bat393 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where bat393 no longer has a legal basis or legitimate reason to retain it, subject to bat393's regulatory retention obligations.
• Right to restriction: You may request that bat393 restrict processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where bat393's processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact bat393 via live chat or at [email protected]. bat393 will respond to verified requests within thirty (30) days.

12. Children's Privacy

bat393 does not knowingly collect or process personal data from persons under the age of 18. The bat393 Platform is strictly for adults aged 18 and over. If bat393 becomes aware that a registered account belongs to a person under 18, the account will be immediately suspended, identity verification requested, and the account permanently closed if the age restriction is confirmed to have been breached. Any balance held in such accounts will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe a minor may be using a bat393 account, please contact bat393 support immediately via live chat or at [email protected].

13. Responsible Gaming & Data Processing

bat393 uses account activity data — including wagering history, deposit patterns, session durations, and responsible gaming tool usage — to fulfil its responsible gaming obligations. This may include identifying accounts that show patterns associated with problem gambling and proactively contacting players to offer responsible gaming resources, or enforcing cooling-off periods.

Records of self-exclusion requests are treated with strict confidentiality and retained for a minimum of five (5) years to ensure that excluded players cannot inadvertently or deliberately re-register during their exclusion period. For more information about bat393's responsible gaming commitments, please visit the Responsible Gaming page.

14. Policy Amendments

bat393 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via Platform notification or SMS to the registered mobile number at least seven (7) days before the changes take effect, except where earlier implementation is required by law or regulatory authority. The date of the most recent revision is shown at the top of this Policy. Your continued use of the bat393 platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related concern, please contact the bat393 Data Support team through the following channels:

• Live Chat: Available 24/7 through the Platform — fastest response for urgent data concerns
• Email: [email protected] — for formal data subject access requests and written privacy queries

bat393 aims to respond to all privacy-related enquiries within thirty (30) days of receipt. Complex requests may require additional time, in which case bat393 will notify you of the expected timeline.